CVE-2025-40022

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/10/2025
Last modified:
27/10/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> crypto: af_alg - Fix incorrect boolean values in af_alg_ctx<br /> <br /> Commit 1b34cbbf4f01 ("crypto: af_alg - Disallow concurrent writes in<br /> af_alg_sendmsg") changed some fields from bool to 1-bit bitfields of<br /> type u32.<br /> <br /> However, some assignments to these fields, specifically &amp;#39;more&amp;#39; and<br /> &amp;#39;merge&amp;#39;, assign values greater than 1. These relied on C&amp;#39;s implicit<br /> conversion to bool, such that zero becomes false and nonzero becomes<br /> true.<br /> <br /> With a 1-bit bitfields of type u32 instead, mod 2 of the value is taken<br /> instead, resulting in 0 being assigned in some cases when 1 was intended.<br /> <br /> Fix this by restoring the bool type.

Impact